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CLAIMS 

What is claimed is: 



1) A method for controlling remote desktop access provided by an interactive 

grid computing system comprising: 

determining user policies based on a classification of a user; and 
providing a dynamic user account to said user, wherein said dynamic user 

account is customized based on said user policies to limit access to resources on a 

remote desktop. 

2. The method as described in Claim 1 further comprising editing a desktop 
configuration file based on said dynamic user account to limit access only to user 
authorized icons on said remote desktop. 

3. The method as described in Claim 2 further comprising displaying said user 
authorized icons on said remote desktop. 

4. The method as described in Claim 1 further comprising editing a desktop 
configuration file based on said dynamic user account to limit access only to user 
authorized menu items on said remote desktop. 

5. The method as described in Claim 4 further comprising displaying said user 
authorized menu items on said remote desktop. 



27 



HP-2003 10470-1 

6. The method as described in Claim 1 further comprising editing a list of 
applications accessible through a shell based on said dynamic user account to limit 
access to user authorized applications executable from said shell on said remote 
desktop. 

5 

7. The method as described in Claim 1 further comprising editing a list of 
directories allowed for browsing based on said dynamic user account to limit access 
to user authorized files of a explorer on said remote desktop. 

10 8. The method as described in Claim 1 further comprising editing a list of 

commands executable from a shell based on said dynamic user account to limit access 
to user authorized commands executable from said shell on said remote desktop. 

9. The method as described in Claim 1 further comprising editing permissions of 
15 an application accessible from said remote desktop based on said dynamic user 

account. 

10. The method as described in Claim 1 further comprising authenticating said 
user before determining said user classification. 

20 

11. A computer readable medium comprising executable instructions which, when 
executed in a processing system, causes the system to perform the steps for a method 
of controlling remote desktop access comprising: 

determining user policies based on a classification of a user; and 
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providing a dynamic user account to said user, wherein said dynamic user 
account is customized based on said user policies to limit access to resources 
accessible through a remote desktop. 

5 12. The computer readable medium as described in Claim 1 1 wherein said method 
further comprises editing desktop configuration files based on said dynamic user 
account to limit access only to user authorized icons on said remote desktop. 

13. The computer readable medium as described in Claim 12 wherein said method 
10 further comprises displaying said user authorized icons on said remote desktop. 

14. The computer readable medium as described in Claim 1 1 wherein said method 
further comprises editing desktop configuration files based on said dynamic user 
account to limit access only to user authorized menu items on said remote desktop. 

15 

15. The computer readable medium as described in Claim 14 wherein said method 
further comprises displaying said user authorized menu items on said remote desktop. 

16. The computer readable medium as described in Claim 1 1 wherein said method 
20 further comprises editing a list of applications accessible through a shell based on said 

dynamic user account to limit access to applications executable from said shell on 
said remote desktop. 

17. The computer readable medium as described in Claim 1 1 wherein said method 
25 further comprises editing a list of directories allowed for browsing based on said 
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dynamic user account to limit access to user authorized files of a explorer on a remote 
desktop. 

18. The computer readable medium as described in Claim 1 1 wherein said method 
further comprises editing a list of commands executable from a shell based on said 
dynamic user account to limit access to user authorized commands executable from 
said shell on said remote desktop. 

19. The computer readable medium as described in Claim 1 1 wherein said method 
further comprises editing permissions of an application accessible from said remote 
desktop based on said dynamic user account. 

20. The computer readable medium as described in Claim 1 1 wherein said method 
further comprises authenticating said user before determining said user classification. 

21 . An interactive grid computing system for controlling remote desktop access 
comprising: 

a resource; 

a grid service access point coupled to said resource for receiving a request 
from a client for said resource; 

a policy engine coupled to said grid service access point for determining user 
policies based on a classification of said client; 

a software agent coupled to said policy engine for assigning a dynamic user 
account for said resource to said client, wherein said dynamic user account is 
customized based on said user policies to limit access to said resource. 
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22. The interactive grid computing system as described in Claim 21 wherein said 
dynamic user account limits access to said resource by limiting access only to client 
authorized icons on a remote desktop of said resource. 

5 

23. The interactive grid computing system as described in Claim 22 wherein said 
client authorized icons are displayed on said remote desktop of said resource. 

24. The interactive grid computing system as described in Claim 21 wherein said 
10 dynamic user account limits access to said resource by limiting access only to client 

authorized menu items on a remote desktop of said resource. 

25. The interactive grid computing system as described in Claim 24 wherein said 
client authorized menu items are displayed on a remote desktop of said resource. 

15 

26. The interactive grid computing system as described in Claim 21 wherein said 
dynamic user account limits access to said resource by limiting access to commands 
executable from a shell on a remote desktop of said resource. 

20 27. The interactive grid computing system as described in Claim 21 wherein said 
dynamic user account limits access to said resource by limiting access only to client 
authorized files of a file explorer on a remote desktop of said resource. 
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28. The interactive grid computing system as described in Claim 27 wherein said 
client authorized files of a file explorer are displayed on a remote desktop of said 
resource 

5 29. The interactive grid computing system as described in Claim 21 wherein said 
grid service access point authenticates said user. 
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